Adriatic Port Authority targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: Italy
• Sector: Transportation
• Announcement date: January 14, 2026

Anubis claims a data breach at Adriatic Port Authority

The Anubis ransomware group has officially listed the Adriatic Port Authority on its dedicated leak site. According to the announcement made on January 14, 2026, the threat actor group alleges that a data breach has occurred within the digital infrastructure of the institution. This claim suggests that sensitive information belonging to the organization has been compromised by the attackers.

Ransomware groups often utilize leak sites as a method of psychological pressure during extortion attempts. These sites serve as a public platform where attackers post the names of their victims to increase visibility and pressure the targeted entities into paying a ransom. In many modern cyberattacks, groups employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. The threat of leaking this stolen data on a public forum provides the attackers with additional leverage, as the organization faces the risk of regulatory scrutiny and reputational damage if the information is released.

Details of the alleged incident

The information provided by the Anubis group regarding the specifics of the attack remains highly limited. While the group has confirmed the targeting of the Adriatic Port Authority, they have not provided any details regarding the nature of the allegedly leaked data. Furthermore, there are no screenshots or visual evidence provided by the group to substantiate their claims of a breach.

The listing names no specific data types that have been compromised. Without concrete evidence or a detailed inventory of stolen files, it is difficult to determine the exact scope of the incident based solely on the group's announcement. Publicly available information regarding the Anubis group itself is also limited, making it challenging to attribute the attack to a specific known entity or to understand their typical operational patterns.

About the Adriatic Port Authority

The Adriatic Port Authority (Autorità di Sistema Portuale del Mare Adriatico Centrale) is a public entity based in Ancona, Italy. The organization is responsible for managing port operations within the region. Its mandate includes overseeing the development of port infrastructure, regulating various logistics activities, and supervising maritime trade services to ensure efficient regional operations.

Potential implications and organizational risks

The alleged incident involving the Adriatic Port Authority may lead to significant disruptions in the institution's operational processes. Because the organization operates within a critical infrastructure sector, such as port operations, a successful breach can have wider consequences. Data breaches in these sectors can negatively impact supply chain security, potentially causing delays or logistical issues that ripple through the maritime trade network.

Furthermore, because institutions operating in Italy are subject to strict data protection obligations under the General Data Protection Regulation (GDPR), the verification of such a breach could trigger formal legal proceedings. The legal and regulatory landscape in Europe requires organizations to maintain high standards of data security and to report breaches within specific timeframes to avoid significant penalties.

Beyond the institutional level, there are secondary risks to individuals associated with the organization. Employees and business partners of the Adriatic Port Authority may face risks such as identity theft or targeted phishing attacks if their personal or professional information is indeed compromised. To mitigate these risks, organizations typically implement defensive measures such as multi-factor authentication, regular security awareness training, and robust network segmentation. Strengthening the security posture of critical maritime infrastructure is essential to maintaining the integrity of global trade and protecting the privacy of all stakeholders involved in the logistics chain.